Certificate Template Request Hash – The Real Story
With a lot of focus on moving from SHA1 to SHA256, one question that I get a lot of is how to get certificates issued with SHA256. The short answer is that a CA signs everything is creates with a single hash signature algorithm. There is no mechanism that enables per-template based signature hash specification. […]
Certificate renewal request is placed in pending state when Valid Existing Certificate is selected in certificate template
Hello S-1-1-0, here is a new blog post in a long time. Today I want to talk about the issue when “Valid existing certificate” does not bypass CA Manager approval and/or enrollment agent requirement during certificate renewal in Microsoft CA. In certificate template settings, Issuance Requirements we can configure additional requirements for enrollment and re-enrollment […]
Changes to the Online Assessment Portal Program
Since the launch of our Online Assessment Program in 2020, we have seen incredible interest in the ability to perform a thorough review and assessment of an organization’s PKI without the expense and effort of working with a consultant onsite. The self-paced, on-demand approach was an industry first for reviewing and assessing the configuration, health, […]
Backing up ADCS Certificate Authorities (Part 2 of 2)
In my last blog post (Backing up ADCS Certificate Authorities Part 1) I covered the inner workings of how ADCS and the Jet database works to maintain the CA data. In this post I am going to go over a comprehensive PowerShell script that I wrote to perform a full backup of all necessary ADCS […]
Avarn Security Ensures Security of Their Organization’s Identity and Encryption Systems with PKI Solutions
Several months ago we worked with one of our customers, Avarn Security, headquartered in Oslo, Norway, to design and implement a PKI environment with cloud-based Hardware Security Modules (HSMs). Avarn Security is the leading security group delivering first-class security solutions to corporate and public sector customers throughout Norway, Sweden, Denmark, and Finland. They provide security […]
Book review – “Pro Active Directory Certificate Services” by Lawrence E. Hughes
Disclaimer: This review contains my personal opinion about the book and does not necessary reflect the company’s or other people’s opinion. Hello everyone, today I have a little-bit unusual blog post, which is a book review. As you may know, my primary interest area is Microsoft Active Directory Certificate Services (ADCS) and it there are […]
ADCS certificate serial number generation algorithms – a comprehensive guide
Hello S-1-1-0, @Crypt32 is again on a failboatboard with new blog post. Today I will share information about a little-known portion in configuration of Microsoft ADCS Certification Authority – serial number generation algorithm. This article assumes big-endian encoding Certificate serial number requirements Every X.509 conforming CA generates a unique serial number for each issued certificate, […]
PKI Solutions Webinar Series
Join us for our PKI Solutions webinar series, kicking off March 26, 2020. This will be a year of talking quantum preparedness, validating SSL certificates, multi-cloud key management, ways to improve the security of your PKI, and more. Mark Cooper, aka The PKI Guy, will present and host the webinars. Learn PKI best practices and […]